CVE-2009-1672

N/A Unknown
Published: May 18, 2009 Modified: April 23, 2026
View on NVD

Description

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.securityfocus.com/bid/34931
Source: cve@mitre.org
Exploit
http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
Source: cve@mitre.org
Exploit URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/50629
Source: cve@mitre.org
https://www.exploit-db.com/exploits/8665
Source: cve@mitre.org
http://www.securityfocus.com/bid/34931
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/50629
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/8665
Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
6.5%
91th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

sun

Related CVEs

CVE-2026-7024 5.4
CVE-2026-7023 6.3
CVE-2026-7022 7.3
CVE-2026-7021 3.5
CVE-2026-7020 5.6